a67e0db1e4474fab8c4bfbad88263d97be24e8e857c85437bbbfbda076b73756

Sharing

Copy URL Twitter E-mail

General

Target
Komplekt_behtv_4.80.rar
Size 413KB
Sample260729-dpeebsvxfw
SHA256 a67e0db1e4474fab8c4bfbad88263d97be24e8e857c85437bbbfbda076b73756
MD5 eba7ff97f846278392ed2334e3d3bd23
SHA1 e70955317fcec03b3f01cb67c2bdcccc1a9e9025
SHA512 e7d43de15136a8b4f5c4009df8e2e542f7b2008b4a92de1ff7d7507c2ffd6bac12c0831474b344d185c28873e6f61c00f6faa3eab5aaa734a7467b8d8ba107e8
SSDEEP 12288:pknfp+v/sjz0CD08S0ZFIluqd9od9mHawgI:mnYv/O0CDNS0ZulzHq9mHR
TLSH
T13E94231672FB230EF20460BDD3724E65B6673B8BEA817D4C4601665AC012F6BDA45EFC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Install.exe
- Size 46KB
- SHA256 a8a408a432482b312b9a3c263e8dce99ab03a08eaa49e714299e58cedc6f962b
- MD5 74327ee70c165dff0528c1be0004d6a4
- SHA1 65296d0b8ea47f7efba81e8ef66c09d1fd352c41
- SHA512 cb568a98925318e63020f999ff82376850750851bdf1a7aeab70416c787ab78a8e747400d6d678a7382817c7723d6d3018742908df66189f10bf54a1a3feb44b
- SSDEEP 768:o/nu1DK3OzWtfmnUlcACIDGMm3ow3I5uxXu0II:o/nPO60RIVmYw4Exe0II
- TLSH
  T11723E60BABA8A438E87152317F752BB102747AB04B6443CBD34A1B5D6D727D1BA313E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  saa713x.sys
- Size 123KB
- SHA256 c8ad9b439baba43675f482c960ebc3a1e160e8135b9171ec87190328b9d9461b
- MD5 606029f16fb0a6eb5e8a46c0c4609709
- SHA1 fa2642f41a5ac246dea96d1328bd8aac0a959a06
- SHA512 e3a6511f6fe2336b1bd57631c3595ef841c51e4ac26b0b7d127a5027cf743d0afcb00a4c8256301a060171ea7a709168eb48120f5ddb2a3145eb8ff7d4e75ddf
- SSDEEP 3072:xOJQ5ftY0ZIDC1WGZWzDggNEp/X4xHShk6MvFwrpADg7Shk6MvFwIPZdH1:F5FY8IW1WGd/MShk6MvFwrpADg7Shk6K
- TLSH
  T186C31712B9408179C9D372F16A2F3739A17CC296132853E733681EF5AD202E56F395AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Flasher/flasher31032006/saa713x flasher.exe
- Size 11KB
- SHA256 ef9cf61f4e04a7a8c817a37d6b7ab34ef33d8032014fdcfe5acac0fbae16cc33
- MD5 93598fb6ef8a71356af2f726ab3cbe63
- SHA1 6ed5b6f49ada42b890f4701d41ca3401b0f07205
- SHA512 b3767565bb943a608f79a81bd1a96dd21e750c5fc57e871624e4510f2a6339530bfa7c7f643f34ef21e7a591f2572c0fe2de319f768077dd65849c0ed5e4c6f5
- SSDEEP 192:dk3zG74AMM/ArkY6O//niECjLc8rrSYhNAu8X:gzAMM/dbO/3CjLp+YLAt
- TLSH
  T15D32E82BB6BC8A1BF1B682700BF705C39535BA02172D5D1F11DD0698BCA52B27EB4386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Drops file in Drivers directory
behavioral5 behavioral6
- Target
  Flasher/readme/flash.html
- Size 20KB
- SHA256 d0d1bcc331cc168b0cae404194db15500215453e6ba67f2a0d91c64110059a7f
- MD5 163856f5c08347793c030ec5df9a7954
- SHA1 e5d0c56a182178280f90fe873baa704d9760ea39
- SHA512 c1a88250517ccc8552b9819f197c303aee05a12681a5852fc71251d839a20d8ae117977fadb699967bb334f167ee3cb9bffaf4a75ea3387094e8ee6e72b4a019
- SSDEEP 384:IZDHm0hyQYgnHipeX++dvGUG5xcichjLmPdGGx526w6Y3i/hnj7eKGBxIqWiKtii:Gm0hyQYoipW0gWP+iJj77NGo
- TLSH
  T1FA928500D3D3580C8272D6D8E5AA6E588781424BE7520D18FF1A653FB5D81E37DB27BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Flasher/readme/flash_files/163.htm
- Size 8KB
- SHA256 b5b9df65e1eee221e220e0722d107b6afccb562b1474f8b67a905920f6370a71
- MD5 c51fe77a2f243981d09a773b99a7efb7
- SHA1 7bca162ab4c4f5fd7f893d24d08758c289f31810
- SHA512 c8487a610ec785645fc2ed865c448a62f7b07581671be829ee9a4d2391fe37006f3dc772e01db43e797c036b04ac827e3332dd3bd182104447cbc786a7878f83
- SSDEEP 192:LxoVGQPxSh856n0QJabcNFcZy+2HBPkBytYJ9:LxoVGvh8Q1W1y+2HhkMA
- TLSH
  T1800264401356B36E866F9731E3A2AC8E6C3E5034D3D21918FD68B4D278D47E63866F9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  FlyTest/FlyPCI.sys
- Size 4KB
- SHA256 f55a9c579e5eab03ea2993a76cec72a09efaecb371bce697c23dae0d6ed1f783
- MD5 93f7e288350460e4bae8807283dd4e6e
- SHA1 75d3ae6c11ab681de07442ce55c0cecc5ba68b30
- SHA512 1656e7c248675b6eeb0fcf60337559aa16795a910429ccbe4692c9b2484e51805366b582aa2bf50e54dfdc219352e7fe4b4652b2c5e47fec1db369251eafd612
- SSDEEP 96:0NtnvmGQSpfExBYmw7BSZgWXjuJOf55V4eAyVhxLKx8:0Xnv1MULwfkYieAyVhxLKx8
- TLSH
  T1AC81E70333E04F13D59904F17DCE962825BB64610FACA7B7033DC87E3299A94F8596DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  FlyTest/FlyTest.dll
- Size 28KB
- SHA256 dff71342603e1b846603a418f6bf60ac185f5642b6ebae56973509844da451c7
- MD5 d2c8e8c7695d9f399c2549fca1118e94
- SHA1 2c7e15d05333c46a3244cf03bdb846e4e49e2426
- SHA512 48b41f87fec78702a14babf969cbd05b859a337d91b98964c1e729c62a67d7281710300fedc5ddafd62791fc6868e502eef96bf21ee7102be49b86af94c2f3a8
- SSDEEP 192:C9TKX0xw+cJ3AjSksm7eAuhlfitbVFHqG8Gy8HzSY/JzAZbU6Ee:CsSDxjSb5iZTJy8TSYAZbb
- TLSH
  T190D23903AB8C10F2E5A52A3A159F673FC3B66A57B6318D0BD393CD302C71112DE32652
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  FlyTest/FlyTest.exe
- Size 145KB
- SHA256 bf8c2336d54bdeda7462258dd8c04beff8aabd7d0d28b5136d2aba6d70eaf60f
- MD5 5a1500dd4ccff1fcad8fa522bb22bb24
- SHA1 317b4833697d3173ff76a80870d8042545f951ef
- SHA512 09c1b28f394881105e7c8443297fd2da8ee253e212d8f2b3d6edc8767cf721c03b7424218cc21844219b2e58d91a6a72929e7b9cc196be9f7886e22ef07a68fd
- SSDEEP 3072:1TTp50SgxuM8MNIJ6WBet+EUMrqKEwKvrmv9UdSTxFM:ZtUxuXMiJvct+EUoi5rSmd6xFM
- TLSH
  T1D9E31249DB444980D2DF08320EA2ADA4AEEBD4DDBBF5A4DF53E48AFE6D011057906533
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Drops file in Drivers directory
behavioral15 behavioral16
- Target
  Patch/Patch480.exe
- Size 256KB
- SHA256 7475656ed09ffbf73a22e19a3ea88f494c166acf22deda88e15b0baae7eef279
- MD5 57489aa6e5fdfd776b475945acd2072c
- SHA1 2ad15f79e068a75491245b8347c18f3842d5ee3b
- SHA512 744bb3d6e11628858d15ce9f710a42afcb4b46649a24b0f2d003a3ab3bd813024aa7f067551f8d18ac3358c8ba1fcf1ddcdc7989dd57ada3a9b6b82a9d5be18f
- SSDEEP 6144:XA27mPXjWSa6+3qAYlHvu6sHwNGmmhSIkcun:bCPXiSaNqAPRwzifkc
- TLSH
  T1EC448D1272E4C477C16711720EE297AAB2B5FC648F768B8777853B0DED326C16A36342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Plugins/BPP_CHSwitchingEffects.dll
- Size 48KB
- SHA256 57b6554940957a3f2f4c3178bb089a56a36fdaa98b40b34a351da87af09f6b1a
- MD5 119d0099166fc39e25cfaeb6413fa060
- SHA1 9af066a1d537655cd4b5cfe1062eb69f24c042bb
- SHA512 83c336c347aa39cf598839c327da481f0ece7c7442ad513ea491cd1209df9f1e62151c0d6ad1a7832908dbb1725b0fd4973134d1f39bc362f32d4e21e60ce8bc
- SSDEEP 384:Z0CfilIP6TUWiDsS/SV9wdZiRm2gkJu8swACQLP6zQ3fmNuyoBFiJe9IXaKzCI:udIP6TJuq0276LP6zQ3fQasM9w
- TLSH
  T12F232C42D7D2C4ECD359293C60AB7BB316689DB13CD986434F16E5BD1CBA173AE9030A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in Drivers directory

Drops file in Drivers directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20